Method and apparatus for automated password entry

Abstract

A method and apparatus are provided for protecting security credentials (e.g., username / password combinations) and / or other sensitive data in a “password vault.” A password vault device may be or may be incorporated into a portable (or even wearable) electronic device, such as a smart phone, smart watch, smart glasses, etc. When a security credential is requested during a user's operation of the password vault device or some other computing / communication device, such as when the user is accessing an online site or service via a browser program, the request is passed to the password vault, and the appropriate security credential is retrieved, delivered, and entered into the requesting interface.

Description

RELATED ART[0001]This application claims priority to U.S. Provisional Patent Application No. 61 / 806,061, filed Mar. 28, 2013, which is incorporated herein by reference.BACKGROUND[0002]This disclosure relates to the field of computer systems. More particularly, methods and apparatus are provided for retaining and automatically entering a login password or other security credential.[0003]Username / password schemes are common methods of preventing unauthorized computer access, and require a valid user to enter an identifier (e.g., a username, an account number, an electronic mail address) and a security token associated with that identifier (e.g., a password, an access code, a personal identification number or PIN) before being granted the desired access. The user is expected to keep the credentials secret, or at least the security token.[0004]As security threats continue to grow and evolve, so too has the sophistication of some username / password schemes. In particular, as more computer...

AI Technical Summary

Benefits of technology

[0005]One way of making access to their systems more secure is to place stricter requirements on user passwords, to decrease the likelihood of a malicious actor guessing a password or determining it through trial and error. For example, instead of simply enforcing some minimal length for a new password, tighter security schemes may require one or more of each of multiple different types or classes of characters (e.g., lower-case letter, upper-case letter, numeral, punctuation). In addition, users may be prompted or even required to change their passwords regularly (e.g., every month, every six months, every year), and may not be permitted to re-use a previous password. Further, users are warned not to use the same password for multiple systems, so that if one password is compromised the potential damage is limited.

Problems solved by technology

In addition, users may be prompted or even required to change their passwords regularly (e.g., every month, every six months, every year), and may not be permitted to re-use a previous password.

Further, users are warned not to use the same password for multiple systems, so that if one password is compromised the potential damage is limited.

Images